1z0-1084-24 Exam Questions – Real & Updated Questions PDF [Q32-Q54]

QUESTION 32
(CHK_1>3) You have an e-commerce application that loads customers’ transactional data into the Oracle Cloud Infrastructure (OCI) Streaming service. The data must now be extracted and transformed before sending it to a third-party REST endpoint. You have been directed to leverage the OCI Service Connector Hub to automate this process. Which configuration option would address this requirement?

Configure a new service connector as follows: * Source: Streaming * Task: Functions * Target:
Functions

Configure a new service connector as follows: * Source: Streaming * Task: API Gateway * Target:
Notifications

Configure a new service connector as follows: * Source: Streaming * Task: None * Target: Notifications

Configure a new service connector as follows: * Source: Streaming * Task: API Gateway * Target:
Functions

Configure a new service connector as follows: * Source: Streaming * Task: Functions * Target: API Gateway

QUESTION 33
To enforce mutual TLS (mTLS) authentication for clients of your microservices, your team has chosen to leverage the Oracle Cloud Infrastructure (OCI) API Gateway service to create new API Deployments that will direct requests to your microservices. Which is NOT valid regarding the mTLS options in OCI API Gateway?

Custom CA or custom CA bundles can be added to your gateway’s trust store ONLY if they already exist in the OCI Certificates service.

Adding a custom certificate authority (CA) or custom CA bundle to your gateway’s trust store for mTLS is optional unless you need to reject certificates that do not contain particular values (such as a domain name).

The mTLS request policy can only be enabled at the API deployment specification level, which then applies globally to ALL routes in that deployment.

Once the mTLS request policy is enabled, ALL requests with valid certificates are routed to the backend unless you have defined one or more particular values (such as a domain name).

QUESTION 34
Your organization is developing serverless applications with Oracle Functions. Many functions will need to store state data in a database, which will require using appropriate credentials. However, your corporate security standards mandate encryption of secret information, such as database passwords. How would you address this security requirement?

Use OCI Console to enter the password in the function configuration section in the provided input field.

Leverage application-level configuration variables to store passwords because they are automatically encrypted by Oracle Functions.

Use the OCI Vault service to auto-encrypt the password and then set an application-level configuration variable to reference the auto-decrypted password inside your function container.

Encrypt the password using the OCI Vault service and then decrypt this password in your function code with the generated key.

QUESTION 35
Which open source engine is used by Oracle Cloud Infrastructure (OCI) to power Oracle Functions?

Knative

Kubeless

Apache OpenWhisk

Fn Project

QUESTION 36
A DevOps engineer is troubleshooting the Meshifyd application, which is running in an Oracle Cloud Infrastructure (OCI) environment. The engineer has set up the OCI Logging service to store access logs for the application but notices that the logs from the Meshifyd application are not showing up in the logging service. The engineer suspects that there might be an issue with the logging configuration. Which two statements are potential reasons for logs from the Meshifyd application not showing up in the OCI Logging service?

The logconfig.json file has incorrect or missing OCID for the custom log in the logobjectId field.

The OCI Logging service is set up to pre access logs by creating a log group and custom log within the same compartment.

The logconfig.json file has incorrect or missing information in the application namespace in the paths field.

The logconfig.json file has incorrect or missing information in the application namespace in the src field.

The logconfig.json file has incorrect or missing OCID for the custom log group in the logGroupObjectId field.

QUESTION 37
Assuming that your function does NOT have the –provisioned-concurrency option enabled, which parameter is used to configure the time period during which an idle function will remain in memory before Oracle Functions removes its container image from memory?

timeout

access-timeout

idle-timeout

None, as this time is not configurable.

QUESTION 38
Which one of the following is NOT a valid backend-type supported by Oracle Cloud Infrastructure (OCI) API Gateway?

STOCK_RESPONSE_BACKEND

HTTP BACKEND

ORACLE_FUNCTIONS_BACKEND

ORACLE_STREAMS_BACKEND

QUESTION 39
Which is NOT a valid option to execute a function deployed in Oracle Functions?

Invoke from the Docker CLI.

Send signed HTTP requests to the function’s invoke endpoint.

Invoke from the Fn Project CLI.

Trigger by an event in the Oracle Cloud Infrastructure (OCI) Events service.

Invoke from the OCI CLI.

QUESTION 40
When developing microservices, each one can be developed in the language of choice. Which term describes this type of development? (Choose the best answer.)

Agile

DevOps

Distributed

Polyglot

QUESTION 41
Your team has created a serverless application deployed in Oracle Functions. It uses a Python function leveraging the Oracle Cloud Infrastructure (OCI) Python SDK to stop any OCI compute instance that does not comply with your corporate security standards. Although there are three non-compliant OCI compute instances, when you invoke this function, none of the instances were stopped. With respect to this issue, which of the following is a valid troubleshooting strategy?

Enable function logging in the OCI console, add some print statements in your function code, and then view the logs to troubleshoot.

Enable function remote debugging in the OCI console, and then use your favorite IDE to inspect the function running on Oracle Functions.

Ensure that the application is deployed within the same OCI compartment as the instance, because you cannot enable function execution data from the OCI console.

Enable function tracing in the OCI console, and then go to the OCI Monitoring console to view the function stack trace.

The valid troubleshooting strategy in this scenario is to enable function logging in the OCI console, add some print statements in your function code, and then view the logs to troubleshoot. Enabling function logging allows you to capture and store logs generated by your function during its execution. By adding print statements or log statements in your function code, you can output relevant information and debug messages to the logs. This helps you understand the execution flow, identify any errors or issues, and gather more information about the function’s behavior. To troubleshoot the issue of the Python function not stopping the non-compliant OCI compute instances, you can follow these steps: Enable function logging in the OCI console: Enable logging for your function to ensure that logs are captured during its execution. Modify your function code: Add relevant print statements or log statements at key points in your code to output debug information or verify the execution flow. For example, you can print the instance details that are being evaluated for compliance. Invoke the function: Trigger the function execution either through an event or manually. View the logs: Access the function logs in the OCI console or retrieve them programmatically.
Look for the expected print statements or log entries that indicate the status of each instance and the decisions made by the function. By reviewing the logs, you can analyze the output and identify any issues or discrepancies. It can help you determine if the function is correctly evaluating the compliance criteria, retrieving the instance details, or making the necessary API calls to stop the instances. You may need to adjust your code logic or investigate further based on the information provided in the logs. Enabling function remote debugging is not a suitable strategy in this case because it is primarily used for inspecting and debugging the function code during development, rather than troubleshooting issues in a deployed function. Enabling function tracing can provide insights into the execution flow and performance of the function but may not directly address the issue of the instances not being stopped. Ensuring that the application is deployed within the same OCI compartment as the instance is not directly related to troubleshooting the issue with the non- compliant instances. It is a consideration for access and permissions but does not provide specific insights into the problem at hand. Remember to refer to the Oracle Functions documentation and consult the official resources for detailed instructions and best practices on troubleshooting and monitoring Oracle Functions.

QUESTION 42
You are using Oracle Cloud Infrastructure (OCI) Resource Manager to manage your infrastructure lifecycle and wish to receive an email each time a Terraform action begins. How should you use the OCI Events service to do this without writing any code?

Create a rule in OCI Events service matching the “Resource Manager Stack – Update” condition. Then select “Action Type: Email” and provide the destination email address.

Create an OCI Notification topic and email subscription with the destination email address. Then create an OCI Events rule matching “Resource Manager Job – Create” condition, and select the notification topic for the corresponding action.

Create an OCI Email Delivery configuration with the destination email address. Then create an OCI Events rule matching “Resource Manager Job – Create” condition, and select the email configuration for the corresponding action.

Create an OCI Notifications topic and email subscription with the destination email address. Then create an OCI Events rule matching “Resource Manager Stack – Update” condition, and select the notification topic for the corresponding action.

QUESTION 43
Which term describes a group formed by a master machine and a worker machine in a Kubernetes architecture?

Cluster

Node

Deployment

Container

Pod

QUESTION 44
A developer using Oracle Cloud Infrastructure (OCI) API Gateway needs to authenticate the API requests to their web application. The authentication process must be implemented using a custom scheme which accepts string-based parameters from the API caller. Which approach should the developer use in this scenario?

Create a cross account functions authorizer.

Create an authorizer function using OCI Identity and Access Management 91AM) based authentication.

Create an authorizer function using request header authorization.

Create an authorizer function using token-based authorization.

QUESTION 45
Which of the following is defined as a configurable, low-latency infrastructure layer that controls the interaction between a network of microservices? (Choose the best answer.)

Containers

Kubernetes

CI/CD Pipelines

DevOps

Service Mesh

QUESTION 46
Which of the following step is NOT required for setting up the Container Engine for Kubernetes (OKE) cluster access using a local installation of kubectl?

Generate Auth token from the OCI console to access the OKE cluster using kubectl.

Install and configure the Oracle Cloud Infrastructure (OCI) CLI.

Set up the kubeconfig file.

Generate an API signing key pair (if you do not already have one) and upload the public key of the API signing key pair.

QUESTION 47
What is the difference between blue/green and canary deployment strategies? (Choose the best answer.)

In blue/green, current applications are slowly replaced with new ones. In canary, the application Is deployed Incrementally to a select group of people.

In blue/green, both old and new applications are in production at the same time. In canary, the application Is deployed incrementally to a select group of people.

In blue/green, current applications are slowly replaced with new ones. In canary, both old and new applications are in production at the same time.

In blue/green, the application Is deployed In minor Increments to a select group of people. In canary, both old and new applications are simultaneously in production.

QUESTION 48
You need to push a new Docker container image to a repository in the Oracle Cloud Infrastructure (OCI) Registry. Which mechanism must you use to provide authentication?

Generate an API signing key to complete the authentication via the Docker CLI.

Generate an Auth Token to complete the authentication via the OCI CLI.

Generate an API signing key to complete the authentication via the OCI CLI.

Generate an Auth Token to complete the authentication via the Docker CLI.

QUESTION 49
You are instructed to automate manual tasks and help software teams manage complex environments at scale using the Oracle Cloud Infrastructure (OCI) services. Which THREE OCI services can be leveraged to securely store and version your application’s source code, and automate the building, testing, and deployment of applications to the OCI platform? (Choose three.)

Container Engine for Kubernetes

DevOps

Oracle Cloud Logging Analytics

Oracle APEX Application Development

Oracle Cloud Infrastructure Registry

Resource Manager

QUESTION 50
A service you are deploying to Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) uses a docker image from a private repository in OCI Registry (OCIR). Which configuration is necessary to provide access to this repository from OKE?

Create a docker-registry secret for OCIR with API key credentials on the cluster, and specify the imagePullSecret property in the application deployment manifest.

Create a docker-registry secret for OCIR with identity Auth Token on the cluster, and specify the imagePullSecret property in the application deployment manifest.

Create a dynamic group for nodes in the cluster, and a policy that allows the dynamic group to read repositories in the same compartment.

Add a generic secret on the cluster containing your identity credentials. Then specify a registryCredentials property in the deployment manifest.

QUESTION 51
You are building a container image and pushing it to Oracle Cloud Infrastructure Registry (OCIR). You need to ensure that these images never get deleted from the repository. Which action should you take?

Write a policy to limit access to the specific repository in your compartment.

Create a group and assign a policy to perform lifecycle operations on images.

Set global policy of image retention to “Retain All Images”.

Edit the tenancy global retention policy.

QUESTION 52
You are creating an API deployment in Oracle Cloud Infrastructure (OCI) API Gateway and you want to configure request policies to control access. Which is NOT available in OCI API Gateway?

Controlling access to the backend OCI resources.

Limiting the number of requests sent to the backend services.

Enabling Cross-Origin Resource Sharing (CORS) support.

Providing authentication and authorization.

QUESTION 53
As a Cloud Native developer, you develop two services in Node.js and deploy them to two different Container Engine for Kubernetes (OKE) clusters that use the same Virtual Cloud Network (VCN). Your security team wants to analyze the network communication between them. How can this requirement be met in the most cost-effective way?

Rewrite the application and send the application logs to an outside log aggregator.

Deploy a third-party logging service and aggregate the network flow logs.

Use the OCI Logging service and enable VCN flow logs.

Deploy Wireshark and intercept the packets.

The best answer is: “Use the OCI Logging service and enable VCN flow logs.” To meet the requirement of analyzing network communication between two services deployed in different Container Engine for Kubernetes (OKE) clusters within the same Virtual Cloud Network (VCN) in a cost-effective way, you can use the OCI Logging service and enable VCN flow logs. The VCN flow logs feature in OCI allows you to capture and log network traffic information for your VCN resources. By enabling VCN flow logs, you can monitor and analyze the network communication between your services without the need for additional third- party logging services or tools. Enabling VCN flow logs provides visibility into the network traffic, including source and destination IP addresses, ports, protocols, and other relevant details. This information can be collected and stored in the OCI Logging service, where you can analyze and gain insights into the network communication patterns between your services. By leveraging the built-in capabilities of the OCI Logging service and enabling VCN flow logs, you can fulfill the security team’s requirement for network communication analysis in a cost-effective manner. This eliminates the need for deploying additional third- party logging services or tools, reducing complexity and potential costs associated with their setup and maintenance. The other options mentioned are not the most cost-effective or suitable solutions for analyzing network communication in this scenario: Deploying a third-party logging service and aggregating the network flow logs would introduce additional costs and complexity, which may not be necessary considering the built- in capabilities provided by OCI. Rewriting the application to send logs to an outside log aggregator would not directly address the requirement of analyzing network communication between the services. It would focus more on application-level logs rather than network-level analysis. Deploying Wireshark and intercepting packets would require additional infrastructure setup and maintenance, which may not be the most cost- effective approach for network analysis in this scenario.

QUESTION 54
What can you use to dynamically make Kubernetes resources discoverable to public DNS servers? (Choose the best answer.)

kubeDNS

DynDNS

CoreDNS

ExternalDNS

1z0-1084-24 Exam Questions – Real & Updated Questions PDF [Q32-Q54]

Updated Apr-2026 Pass 1Z0-1133-24 Exam – Real Practice Test Questions [Q10-Q31]

[Dec-2025] Study resources for the Valid 1z0-1054-25 Braindumps! [Q57-Q72]

Guaranteed High Marks with Updated & Real 1z0-1058-22 Dumps pdf Free Updates [Q40-Q64]

Leave a Reply Cancel reply

Related Posts

Leave a Reply Cancel reply